Because replicating UI design is of course the hardest thing about phishing attacks, making them virtually impossible without the source code…god damn that is such a bullshit reason.